600.436 High-
Assurance Systems
Fall 01/System Security Realization
29
Definition
¨
(Design patterns for) the internal structure
of the TSF (that) result in a TSF that is
simple enough to be analyzed.
